natas_hw
/
grpc
0
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
32,364 Commits 242 Branches 349 Tags 892 MiB
Commit Graph

4833 Commits

Author SHA1 Message Date
Adele Zhou ddab3f011f Pick a random starting port 2018-05-10 16:12:49 -07:00
jiangtaoli2016 274840e4d3 Migrate SSL_transport_security TSI to new TSI handshaker API 2018-05-09 14:42:48 -07:00
Yihua Zhang 6fbc436b11 Add tsi_handshaker_shutdown to TSI 2018-05-09 09:45:47 -07:00
Yihua Zhang cc93663910 Add ALTS fuzzer 2018-05-08 10:15:03 -07:00
yihuaz 36bb9a44c8
Merge pull request #15240 from yihuazhang/google_default_creds 
Incorporate alts to google default creds
 2018-05-04 13:47:53 -07:00
Yihua Zhang 392dad7134 incorporate alts to google default creds 2018-05-03 20:12:20 -07:00
Yash Tibrewal 7392f05321 Fix bad_ping end2end test flakiness 2018-05-03 16:59:13 -07:00
Juanli Shen b61c42ea31
Merge pull request #15156 from AspirinSJL/resolution_timer_fix 
Check retry timer before starting resolving
 2018-04-30 13:45:17 -07:00
Juanli Shen 3ffb8d5c4d Don't resolve if there is a resolution timer 2018-04-30 10:41:46 -07:00
jiangtaoli2016 310d87d509 fix namespace of security_connector test functions 2018-04-27 08:49:02 -07:00
David Cowden 116fd29a36
gRPC core: strip zone-id from IPv6 hosts before TLS verification 
When initiating a connection to an IPv6 peer using an address that is
not globally scoped, there may be ambiguity regarding which zone the
destination address applies to when multiple links of the same scope
are present. The scoped address architecture and zone-id syntax are
described in rfc4007 and rfc 6874, respectively:

  * https://tools.ietf.org/html/rfc4007#section-6
  * https://tools.ietf.org/html/rfc6874

This patch allows host name verification performed during TLS session
establishment, and on a per-call basis, to work correctly when the peer
presents a certificate with a non-global IPv6 address listed as one of
its alternate names. Whether arbitrary certificate authorities choose
issue certificates of this nature, or not, is outside the scope of gRPC.

The zone-id is separated from the address using a percent (%) character.
It is considered a system implementation detail and guidance suggests it
be stripped from any paths or addresses egressing a host because it is
irrelevant and meaningless otherwise. It would not make sense for a
server to present a certificate containing non-global IPv6 addresses
with zone-ids present nor would it work unless two hosts happened to
be using the same zone-id.

ssl_host_matches_name is prefixed with grpc_ because it has been
promoted to the global namespace for testing.

Resolves #14371
 2018-04-26 12:25:38 -07:00
Vijay Pai 5624ccbf7c
Merge pull request #15047 from davidben/ssl-session-access 
Do not reach into BoringSSL internals.
 2018-04-25 16:55:28 -07:00
Jiangtao Li 2d894a8c3b
Merge pull request #15155 from grpc/revert-15150-revert-15130-fake_handshaker 
Revert "Revert "Add fake ALTS handshaker server (bazel only)""
 2018-04-24 12:33:36 -07:00
Ruslan Nigmatullin 6bdcc6f7cf [openssl] Use 80-bytes STEK for OpenSSL-1.1 2018-04-23 16:24:58 -07:00
jiangtaoli2016 9c32619ab0 Fix BUILD to allow successful import 2018-04-23 14:15:00 -07:00
Jiangtao Li 1b7d6af8ca
Revert "Revert "Add fake ALTS handshaker server (bazel only)"" 2018-04-23 12:24:37 -07:00
Mark D. Roth 69c1235780
Revert "Add fake ALTS handshaker server (bazel only)" 2018-04-23 09:20:18 -07:00
Jiangtao Li 27fd07b12b
Merge pull request #15130 from jiangtaoli2016/fake_handshaker 
Add fake ALTS handshaker server (bazel only)
 2018-04-20 14:35:48 -07:00
jiangtaoli2016 68d1fb9a2c Add fake ALTS handshaker server (bazel only) 2018-04-20 13:18:05 -07:00
Mark D. Roth a1459aa6ce
Merge pull request #14954 from markdroth/retry_fix 
Fix retry code handling of internally triggered recv_trailing_metadata.
 2018-04-20 10:38:55 -07:00
Mark D. Roth 28814c5ecc
Merge pull request #15117 from markdroth/dns_resolver_test_fix 
Clean up test cases in dns_resolver_test.
 2018-04-19 10:37:49 -07:00
Mark D. Roth 8892c087b9
Merge pull request #15090 from markdroth/handshaker_trace 
Add tracer for handshakers.
 2018-04-19 10:34:00 -07:00
Mark D. Roth 7898da90e7 Clean up test cases in dns_resolver_test. 2018-04-19 08:22:10 -07:00
Mark D. Roth 908a2173fe Avoid warnings from LLVM -Wself-assign. 2018-04-18 08:04:11 -07:00
Mark D. Roth dc4d01f6ef Add tracer for handshakers. 2018-04-17 14:58:34 -07:00
Juanli Shen 40991ee014 Add build path to ALTS test BUILD files 2018-04-17 10:55:47 -07:00
Yihua Zhang fe2fa0c1c8 Add C++ experimental API extensions for ALTS C stack 2018-04-16 15:11:32 -07:00
Sree Kuchibhotla 7e37a42e14
Merge pull request #15020 from danzh2010/multisockets 
Allow udp_server to create multiple listeners for each port via SO_REUSEPORT
 2018-04-12 16:15:28 -07:00
David Benjamin 10c2ea3ca2 Do not reach into BoringSSL internals. 
SSL_SESSION is a private struct and should not be accessed by calling
code. There is no need to assert on the reference count in that test;
the test already asserts on whether the SSL_SESSION was destroyed.
 2018-04-12 18:14:44 -04:00
Dan Zhang 8bd239551a use renamed function in test for cheking so_reuseport 2018-04-12 11:28:11 -04:00
Dan Zhang 8c2314093b Allow udp_server to create multiple listeners for each port via SO_REUSEPORT 2018-04-12 11:15:57 -04:00
Mark D. Roth de077acf5d Fix retry code handling of internally triggered recv_trailing_metadata. 2018-04-12 08:05:44 -07:00
Jan Tattermusch 749f923c5b
Merge pull request #14945 from ara-ayvazyan/improve_log_perf 
Avoid low severity log message construction
 2018-04-12 08:56:40 +02:00
Adele Zhou 3f322e1088 Fix a memory leak 2018-04-10 17:07:33 -07:00
kpayson64 c7c35c5cd7 Disable SO_REUSEPORT disabled test for uv tests 2018-04-09 14:09:29 -07:00
Mark D. Roth 03f01fd9ae
Merge pull request #14845 from markdroth/inlined_vector 
Change InlinedVector to keep elements stored contiguously.
 2018-04-09 13:05:35 -07:00
Jan Tattermusch 3095e350ac regenerate projects using tools/buildgen/generate_projects.sh 2018-04-05 09:41:03 +02:00
David Garcia Quintas d3ace6cf29 Fix authority fuzzing failures 2018-03-29 10:13:14 -07:00
Mark D. Roth 7f25d201c3
Merge pull request #14734 from markdroth/c++_retry_throttle 
Convert retry throttle code to C++ and add tests.
 2018-03-29 07:47:47 -07:00
David G. Quintas 07e75a02a0
Merge pull request #14615 from dgquintas/authority_header 
Secure channels: use the right authority
 2018-03-28 15:44:52 -07:00
Mark D. Roth 62d2ca77db Change InlinedVector to keep elements stored contiguously. 2018-03-28 08:54:03 -07:00
Mark D. Roth 9db86fcc63 Convert retry throttle code to C++ and add tests. 2018-03-28 07:42:20 -07:00
David Garcia Quintas b08e6a2e3d fix generate_tests.bzl 2018-03-27 16:03:18 -07:00
Yash Tibrewal c2a89cbdab
Merge pull request #14769 from yashykt/sslcerttestfix 
Use same queue for batch ops and for shutdown in h2_ssl_cert_test
 2018-03-27 15:59:50 -07:00
David Garcia Quintas 158375a440 Merge branch 'master' of github.com:grpc/grpc into authority_header 2018-03-27 14:46:18 -07:00
David Garcia Quintas 49f625f232 more comments 2018-03-27 11:23:49 -07:00
David Garcia Quintas 861363d618 added call_host_override test 2018-03-26 15:57:33 -07:00
adelez bc7e096dd3
Merge pull request #14788 from adelez/foundry_integration 
Add timeout param to grpc_cc_test, set it to long for fuzzer tests and eternal for api_fuzzer
 2018-03-26 10:38:26 -07:00
David Garcia Quintas 8a6453d31b localhost or 127.0.0.1 2018-03-25 15:36:39 -07:00
Jiangtao Li c7c779f51a
Merge pull request #14722 from jiangtaoli2016/ssl_load_root_certs 
load ssl default root certificates only once
 2018-03-25 15:17:21 -07:00